Re: [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis

jouni korhonen <jouni.nospam@gmail.com> Thu, 05 March 2009 09:42 UTC

Return-Path: <jouni.nospam@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8806C28C1C3 for <dime@core3.amsl.com>; Thu, 5 Mar 2009 01:42:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.147
X-Spam-Level:
X-Spam-Status: No, score=-3.147 tagged_above=-999 required=5 tests=[AWL=1.452, BAYES_00=-2.599, GB_I_LETTER=-2]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rxuJylz-qK2F for <dime@core3.amsl.com>; Thu, 5 Mar 2009 01:42:24 -0800 (PST)
Received: from mail-ew0-f177.google.com (mail-ew0-f177.google.com [209.85.219.177]) by core3.amsl.com (Postfix) with ESMTP id 176ED28C1F5 for <dime@ietf.org>; Thu, 5 Mar 2009 01:42:23 -0800 (PST)
Received: by ewy25 with SMTP id 25so2936853ewy.37 for <dime@ietf.org>; Thu, 05 Mar 2009 01:42:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=RNEjhzgSeL2UTEddBfILj9kDnLemfllk0eSXrpfJRfY=; b=c0HX0QYLCCMFcnAMlfzwthdnjuF+zC8XO18L1zwM5XB7NXPhiIlU7WuUPRRk5kzPMj J1pEBYU0349lYVh1rBMaq0RfCVGocU2NMYrHyAhUi4EL8JL6APcO6aMiwjUfVKORd1CB rk0tbmrHZEyb8MHhPew81CDb3zznnF/y5zXLg=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=e4RuXDelGG2PvNNTW9tG1VF7CfawYqT6jaouXyk3z7w9jhiDZNzTgr2I+LnOtOA8Uf S7VWyigtPaXH8kubRe6gYDfrgQEQPxj0DyqmCKRVhsc1iHlqhAH6Q2J4kKJOlAxfH+Fa hrbIrQwCAcX4ZIsJY26CvxA8ahVHmD9PmSQ8A=
Received: by 10.216.55.211 with SMTP id k61mr465859wec.95.1236246172384; Thu, 05 Mar 2009 01:42:52 -0800 (PST)
Received: from ?10.183.180.98? ([192.100.124.156]) by mx.google.com with ESMTPS id d25sm10596566nfh.10.2009.03.05.01.42.51 (version=TLSv1/SSLv3 cipher=RC4-MD5); Thu, 05 Mar 2009 01:42:52 -0800 (PST)
Message-Id: <68275C95-3411-45C6-B1F8-95A4F1836EFD@gmail.com>
From: jouni korhonen <jouni.nospam@gmail.com>
To: Fortune HUANG <fqhuang@huawei.com>
In-Reply-To: <008c01c99d3c$8bb36c00$7b27460a@china.huawei.com>
Content-Type: text/plain; charset="US-ASCII"; format="flowed"; delsp="yes"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Thu, 05 Mar 2009 11:42:50 +0200
References: <008c01c99d3c$8bb36c00$7b27460a@china.huawei.com>
X-Mailer: Apple Mail (2.930.3)
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 09:42:25 -0000

Hi Fortune,


On Mar 5, 2009, at 4:46 AM, Fortune HUANG wrote:

[snip]


>
> My conclusion after comparing the grammars of the three RFCs:
> 1) According to the above RFC4282 grammar, "2.a " is a valid realm.

Correct.

>
> 2) According to the above RFC4566 grammar, "2.a " is not a valid  
> FQDN since
> it has only 3 characters (not 4 or more).

First, RFC4566 ABNF is not in a role for defining FQDN.. it is an ABNF  
for SDP grammar. So if the SDP grammar ABNF is wrong, it is not the  
problem of original FQDN ABNF. Besides, using "2.a" as an example is  
misleading. There is no root zones that are one character long (see  
ICP-1, RFC1591). The shortest root zone is two characters, which would  
e.g. be "2.ac" and this is correct according to the ABNF in RFC4566.  
The RFC1035 BNF would allow one character root zones, however, those  
just do not exist in Internet DNS.

>
> 3) According to the above RFC1035 grammar, "2.a" is not a valid  
> domain since
> it doesn't start with a letter (but a digit).

RFC1101 updates RFC1035 and relaxes the issue with a digit being the  
first character.


> If one could prove that the grammar of realm is the same as the  
> grammar of
> FQDN,  then, RFC4282, RFC1035 and RFC4566 would be proven inconsistent
> according.

So far, no problems with cases 2) and 3). Regarding the case 1) few  
notes. RFC3588bis section 1.3. states that "NAI realm names are  
required to be unique, and are piggybacked on the administration of  
the DNS namespace." This basically means one loses its rights for  
"creative" realm names when used with Diameter. In DNS, one character  
root zones do not exist, thus "2.a" is not legal within Diameter scope.

> However, I am not sure if I have found the right place where the  
> strict
> grammar of FQDN is defined. Please tell me if you know.
> But RFC4566 and RFC1035 were the materials my comment in the  
> previous email
> was based on.

Although this stuff is spread a bit around and topped with de-facto  
assumptions, I think there is no issue.

Cheers,
	Jouni




>
>
>
> Best Regards,
> Fortune
>
> -----Original Message-----
> From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com]
> Sent: Thursday, March 05, 2009 6:02 AM
> To: lionel.morand@orange-ftgroup.com
> Cc: fqhuang@huawei.com; glenzorn@comcast.net; dime@ietf.org
> Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in
> RFC3588bis
>
> Hi Fortune,
>> I'm not sure to understand but I might have missed something.
>>> From a syntax point of view, what is the difference between a FQDN  
>>> and a
> realm?
>> What would be the "potential" impacts to say that the  
>> DiameterIdentity can
> be a FQDN or a realm?
>>
> I have the same question as Lionel. Syntactically, FQDN and realm  
> are the
> same from the parsers point of view. The difference is in semantics  
> which is
> already specified by the AVP having that type.
>
> regards,
> victor
>
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime